Unidentified attackers breach tens of thousands of Cisco devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1435 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the… | 7.2 | 8% | ||
| CVE-2023-20198 | Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited) | 10.0 | 100% | KEV | KEV |
From the original article
4 min read at cyberscoop.com
Attackers are actively exploiting vulnerable Cisco software to primarily target telecommunications companies, researchers say. The Cisco Systems logo is displayed at the Mobile World Congress (MWC) in Barcelona on February 25, 2019.
By @AJVicens · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.